medium5.4
CVE-2021-38713
Cross-site scripting in imgURL
Impact
imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | helloxz/imgurl | <= 2.31 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Imgurl Project | Imgurl | Version 2.31 |